sanitize-html
A fast HTML sanitizer that cleans user-submitted HTML while preserving whitelisted elements and attributes.
What is sanitize-html?
sanitize-html is a JavaScript library that cleans and sanitizes HTML content submitted by users. It removes potentially dangerous markup like scripts and styles while preserving only the HTML elements and attributes that developers explicitly allow, preventing cross-site scripting (XSS) attacks and other security vulnerabilities.
Web developers building applications that accept HTML input from users, such as content management systems, forums, comment systems, and rich text editors.
Developers choose sanitize-html for its precise whitelist-based control, high performance through htmlparser2 integration, and robust security approach that defaults to removing all HTML unless explicitly permitted.
Overview
Clean up user-submitted HTML, preserving whitelisted elements and whitelisted attributes on a per-element basis. Built on htmlparser2 for speed and tolerance
Use Cases
Best For
- Sanitizing user comments in blog or forum applications
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
